diff options
Diffstat (limited to 'ansible')
| -rw-r--r-- | ansible/files/wireguard-dns-records-net1.yml | 25 | ||||
| -rw-r--r-- | ansible/group_vars/wireguard_net1.yml (renamed from ansible/group_vars/wireguard_net1/main.yml) | 0 | ||||
| -rw-r--r-- | ansible/roles/wireguard/tasks/main.yml | 20 |
3 files changed, 45 insertions, 0 deletions
diff --git a/ansible/files/wireguard-dns-records-net1.yml b/ansible/files/wireguard-dns-records-net1.yml new file mode 100644 index 0000000..5a3665d --- /dev/null +++ b/ansible/files/wireguard-dns-records-net1.yml @@ -0,0 +1,25 @@ +wireguard_dns_records_net1: + - type: A + name: birgitte + value: 192.168.80.2 + state: present + - type: AAAA + name: birgitte + value: fdf3:aad9:a885:0b3a::2 + state: present + - type: A + name: conflatorio + value: 192.168.80.3 + state: absent + - type: AAAA + name: conflatorio + value: fdf3:aad9:a885:0b3a::3 + state: absent + - type: A + name: fuckaduck + value: 192.168.80.4 + state: present + - type: AAAA + name: fuckaduck + value: fdf3:aad9:a885:0b3a::4 + state: present diff --git a/ansible/group_vars/wireguard_net1/main.yml b/ansible/group_vars/wireguard_net1.yml index 8e17dea..8e17dea 100644 --- a/ansible/group_vars/wireguard_net1/main.yml +++ b/ansible/group_vars/wireguard_net1.yml diff --git a/ansible/roles/wireguard/tasks/main.yml b/ansible/roles/wireguard/tasks/main.yml index a663be3..9d87c5b 100644 --- a/ansible/roles/wireguard/tasks/main.yml +++ b/ansible/roles/wireguard/tasks/main.yml @@ -133,3 +133,23 @@ rule: allow port: "{{ wireguard__listen_port }}" proto: udp + +- name: generate dns records + tags: wireguard-dns-records + when: wireguard__role == 'server' + local_action: + module: copy + content: | + wireguard_dns_records_{{ wireguard__net_id }}: + {% for c in wireguard__clients|sort %} + {% set client = wireguard__clients[c] %} + - type: A + name: {{ c }} + value: {{ client.ipv4 }} + state: {{ client.state }} + - type: AAAA + name: {{ c }} + value: {{ client.ipv6 }} + state: {{ client.state }} + {% endfor %} + dest: "files/wireguard-dns-records-{{ wireguard__net_id }}.yml" |